About The Company
Expedia Group brands power global travel for everyone, everywhere. We design cutting-edge tech to make travel smoother and more memorable, and we create groundbreaking solutions for our partners. Our diverse, vibrant, and welcoming community is essential in driving our success.
Why Join Us
To shape the future of travel, people must come first. Guided by our Values and Leadership Agreements, we foster an open culture where everyone belongs, differences are celebrated and know that when one of us wins, we all win.We provide a full benefits package, including exciting travel perks, generous time-off, parental leave, a flexible work model (with some pretty cool offices), and career development resources, all to fuel our employees' passion for travel and ensure a rewarding career journey. We&aposre building a more open world. Join us.
About The Role
Expedia Group is seeking a highly skilled Security Engineer to join our Security Solutions Engineering team. In this role, you will be instrumental in designing, implementing, and maintaining critical security systems that protect our infrastructure and data across cloud and on-premise environments. This is a highly visible position that requires a deep understanding of complex technical environments and the ability to develop simple, effective security solutions. You will work closely with cross-functional teams to deliver security initiatives from conception through deployment, ensuring our security posture remains robust and proactive against emerging threats.
Qualifications
The ideal candidate will possess a Bachelor&aposs or Master&aposs degree in a relevant technical field or equivalent professional experience. You should have at least three years of experience in security engineering and operations support within mission-critical environments. Hands-on experience with AWS cloud services such as EC2, VPC, S3, IAM, CloudFormation, and Lambda is essential, along with a strong understanding of AWS security best practices. Familiarity with security tools like Web Content Filtering, Web Application Firewalls, Intrusion Detection Systems, Vulnerability Management, Endpoint Detection & Response, SIEM, and SOAR platforms is highly preferred.Additional qualifications include a solid understanding of network and system design principles, the ability to analyze security logs and artifacts, and experience with scripting languages such as Python, Java, Perl, or Ruby. Strong organizational, communication, and interpersonal skills are necessary to interact effectively with stakeholders and team members. A proactive, innovative mindset focused on reducing technical debt and automating routine tasks will set you apart.
Responsibilities
- Design, implement, and maintain endpoint detection and response systems, including anti-malware agents, advanced threat protection, and data loss prevention tools.
- Manage web content filtering solutions, both on-premise and cloud-based, to ensure seamless internet security.
- Oversee vulnerability management processes for data center and cloud assets, ensuring timely patching and compliance.
- Integrate and analyze threat intelligence feeds from sources such as Recorded Future to identify emerging threats.
- Develop and implement threat detection strategies, including user behavior analysis and security investigations.
- Configure and optimize SIEM and SOAR solutions, ensuring effective security monitoring and incident response.
- Secure container environments through discovery, security policies, and vulnerability assessments.
- Manage network security measures, including Web Application Firewalls, Intrusion Prevention Systems, and AWS GuardDuty.
- Conduct security audits and utilize orchestration tools to automate security workflows.
- Proactively monitor, analyze, and improve security systems to enhance our overall security posture.
- Develop detailed project plans, technical documentation, and comprehensive test plans for security initiatives.
- Collaborate with business and technical teams to resolve complex security challenges and implement best practices.
- Influence and improve engineering practices within and beyond the security team to foster a security-first culture.
Benefits
Expedia Group offers a comprehensive benefits package designed to support our employees' well-being and professional growth. This includes competitive health insurance plans, travel perks that allow you to explore the world, generous paid time off, parental leave policies, and flexible work arrangements to promote work-life balance. We also provide career development resources such as training programs, mentorship opportunities, and internal mobility options to help you achieve your career goals. Our inclusive culture encourages collaboration, innovation, and continuous learning, making Expedia a great place to grow your career while pursuing your passion for travel.Equal OpportunityExpedia Group is committed to creating an inclusive work environment where diversity is valued and all employees are treated with respect. We provide equal employment opportunities to all qualified applicants regardless of race, religion, gender, sexual orientation, national origin, disability, age, or any other protected status. We believe that a diverse workforce fosters innovation and drives our success. We encourage individuals from all backgrounds to apply and join our mission to build a more open and connected world.
